Vulnerability Development mailing list archives

Re: local security workaround through IE


From: whitevampire () MINDLESS COM (WHiTe VaMPiRe)
Date: Fri, 31 Mar 2000 23:51:33 -0500


On Fri, Mar 31, 2000 at 07:07:23PM +0100, Andrew Bennieston(andrew () BENNIESTON FREESERVE CO UK) wrote:
: Uh, Isn't it easier to boot into safe mode and remove the security that
: way...??

        Well, no.  Say you are at a library; the BIOS is protected by a
password.. place is busy, people around you, librarians watching.. are
you going to be able to open up the case, reset the BIOS (even via other
methods), boot a disk, circumvent the security?  No.

        I would love to hear any suggestions for circumventing the
'interal security' in Windows 98 (95?) that allows you disable most of
the system functions via the registry without taking any of the
above actions.  Probably the only or best methods are via Office,
Netscape, or some sort of software package available that ignores the
rules set.  Although accessing the main hard drive is quite frequently
disabled as a whole, which prevents a lot of that too.

        No Windows machine is secure, especially if you have physical
access.  Nevertheless, if you are in a monitored area, and the system is
locked moderately tight, it limits your options.

Regards,

---
    __      ______   ____
   /  \    /  \   \ /   / WHiTe VaMPiRe\Rem
   \   \/\/   /\   Y   /  whitevampire () mindless com
    \        /  \     /   http://www.projectgamma.com/
     \__/\  /    \___/    http://www.gammaforce.org/
          \/ "Silly hacker, root is for administrators."


<HR NOSHADE>
<UL>
<LI>application/pgp-signature attachment: stored
</UL>


Current thread: